tag: Financial-Fraud · 6 items
- Engineer — Skip
- SOC/IR — Learn: This case documents a multi-year spearphishing campaign targeting tax preparation firms, offering a concrete example of credential-theft-to-financial-fraud kill chain useful for triage context in similar sectors.
- Leader — Skip
- Engineer — Skip
- SOC/IR — Learn: Black Axe is a well-documented BEC and financial fraud syndicate; this extradition confirms continued law enforcement pressure but offers no new IOCs or TTPs to act on.
- Leader — Learn: Useful context for boards asking about cyber-enabled financial fraud threat actors; no immediate action required but relevant for sector risk discussions.
- Engineer — Skip
- SOC/IR — Learn: Breeze Comet (UNC5669) is a financially motivated actor specializing in Brazilian payment and banking software manipulation; the actor profile and TTPs are useful context if your estate includes Brazilian fintech integrations, but no IOCs or detections are surfaced in this item.
- Leader — Skip
- Engineer — Skip
- SOC/IR — Learn: The attack vector — exploiting a third-party service provider to reach bank customer accounts — is a useful case study in lateral trust abuse, but no IOCs, TTPs, or detection artifacts are available to act on.
- Leader — Learn: A €30M fraud executed through a service provider flaw reinforces third-party risk as a board-level concern; useful framing for vendor risk discussions, but no specific vendor exposure to assess here.
- Engineer — Skip
- SOC/IR — Learn: WindRelay/SpyNote combo represents a maturing NFC relay technique worth tracking for mobile threat awareness, but no enterprise detection surface or IOCs are provided to act on.
- Leader — Skip
- Engineer — Learn: Breach post-mortem showing how stolen data is monetized through downstream fraud at scale, but no technical attack details or vulnerability specifics are disclosed to act on.
- SOC/IR — Skip
- Leader — Learn: A concrete example of stolen data translating directly into quantifiable financial loss ($13M), useful for illustrating data-breach business risk in board or audit conversations.